CVE-2018-18894: Lexmark 6500e Firmware

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.

Affected products

  • Lexmark 6500e Firmware: before lhs60.jr.p683 (fixed in lhs60.jr.p683)
  • Lexmark c748 Firmware: before lhs60.cm4.p683 (fixed in lhs60.cm4.p683)
  • Lexmark c79x Firmware: before lhs60.hc.p683 (fixed in lhs60.hc.p683)
  • Lexmark c925 Firmware: before lhs60.hv.p683 (fixed in lhs60.hv.p683)
  • Lexmark c95x Firmware: before lhs60.tp.p683 (fixed in lhs60.tp.p683)
  • Lexmark CS41X Firmware: before lw71.vy2.p216 (fixed in lw71.vy2.p216)
  • Lexmark CS51X Firmware: before lw71.vy4.p216 (fixed in lw71.vy4.p216)
  • Lexmark CS748 Firmware: up to and including lhs60.cm4.p683
  • Lexmark CS796 Firmware: before lhs60.hc.p683 (fixed in lhs60.hc.p683)
  • Lexmark CX410 Firmware: before lw71.gm4.p216 (fixed in lw71.gm4.p216)
  • Lexmark CX510 Firmware: before lw71.gm7.p216 (fixed in lw71.gm7.p216)
  • Lexmark m3150 Firmware: before lw71.pr4.p216 (fixed in lw71.pr4.p216)
  • Lexmark m5155 Firmware: before lw71.dn4.p216 (fixed in lw71.dn4.p216)
  • Lexmark m5163 Firmware: before lw71.dn4.p216 (fixed in lw71.dn4.p216)
  • Lexmark m5170 Firmware: before lw71.dn7.p216 (fixed in lw71.dn7.p216)
  • Lexmark MS610DE Firmware: before lw71.pr4.p216 (fixed in lw71.pr4.p216)
  • Lexmark MS610DTE Firmware: before lw71.pr4.p216 (fixed in lw71.pr4.p216)
  • Lexmark MS810DE Firmware: before lw71.dn4.p216 (fixed in lw71.dn4.p216)
  • Lexmark MS812DE Firmware: before lw71.dn7.p216 (fixed in lw71.dn7.p216)
  • Lexmark MS91X Firmware: before lw71.sa.p216 (fixed in lw71.sa.p216)
  • Lexmark MX410 Firmware: before lw71.sb4.p216 (fixed in lw71.sb4.p216)
  • Lexmark MX510 Firmware: before lw71.sb4.p216 (fixed in lw71.sb4.p216)
  • Lexmark MX511 Firmware: before lw71.sb4.p216 (fixed in lw71.sb4.p216)
  • Lexmark MX610 Firmware: before lw71.sb7.p216 (fixed in lw71.sb7.p216)
  • Lexmark MX611 Firmware: before lw71.sb7.p216 (fixed in lw71.sb7.p216)
  • and 24 more

Published 2020-03-10. Last modified 2026-06-17.